Disable forced SMB Signing in Windows

Introduction

SMB Signing is not supported in MoPho version 1.0. Some versions of Windows force SMB Signing by default and will block applications that don't yet support it (like moPho). Having this setting on can cause MoPho to show an 'Access Denied' Error, even if permissions are correct. This has been reported in versions of Windows Server, commonly in Domain environments. In order to use MoPho in these cases you will need to change some settings on your Server or Domain Controller to prevent your server from blocking MoPho.
You will need administrative access to your server or Domain controller in order to make these changes. You may need the assistance of an IT Professional to perform the following steps. You should consult with your IT Professional to determine if changing these settings is appropriate for your business.

Steps

  • Step 1: Open up either the Local Policy Editor or Group Policy Management Editor if you are on a domain.

    Local Policy Editor

    Open the Local Security Policy program located in the 'Administrative Tools' section of the Control Panel.

    Group Policy Management Editor

    • Open the Group Policy Management Application.
    • On the left, open up the Group Policy Objects folder.
    • Right click the entry named Default Domain Controller Policy and click 'Edit'. This will open up the Group Policy Management Editor application.
  • Step 2: Navigate to the Security Options

    Local Policy Editor

    • Located under Security Settings --> Local Policies --> Security Options

    Group Policy Management Editor

    • Located under Computer Configuration --> Policies --> Windows Settings --> Security Settings --> Local Policies --> Security Options
  • Step 3: In the list on the right, locate the item named Microsoft Network Server: Digitally sign communications (always)
    Important: Make sure that you select the Microsoft Network Server item and not the Microsoft Network Client one!
  • Step 4: Disable the policy setting.
    • Double click Microsoft Network Server: Digitally sign communications (always). This will open up a new window.
    • Check the box Define this policy setting if its not already.
    • Select the Disabled option.
    • Click Apply and then close the window.
    • NOTE: If these options appear grayed out in the Local Policy Editor you may have to edit the setting using the Group Policy Management Editor instead.